Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/83C04DF87FD711EF9C880ABC762E951A.roa
File: 83C04DF87FD711EF9C880ABC762E951A.roa (raw, json)
Hash identifier: ggerVZ8oxKy4TyGLqVXU81zJkDdDT0rA41TUPmGkZHU=
Subject key identifier: 26:AD:60:3E:01:FB:F7:27:66:3C:18:27:C8:61:25:56:29:23:B5:A7
Certificate issuer: /CN=F365C895AF/serialNumber=10C70628F7215FFA2EC3BDFE459686F45CBEE52E
Certificate serial: 07D1
Authority key identifier: 10:C7:06:28:F7:21:5F:FA:2E:C3:BD:FE:45:96:86:F4:5C:BE:E5:2E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/EMcGKPchX_ouw73-RZaG9Fy-5S4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/83C04DF87FD711EF9C880ABC762E951A.roa
Signing time: Tue 01 Oct 2024 09:28:28 +0000
ROA not before: Tue 01 Oct 2024 09:28:17 +0000
ROA not after: Wed 01 Oct 2025 09:28:17 +0000
asID: 328174
IP address blocks: 2001:43f8:1070::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.crl
rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.mft
rsync://rpki.afrinic.net/repository/afrinic/EMcGKPchX_ouw73-RZaG9Fy-5S4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 24 Nov 2024 00:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2001 (0x7d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F365C895AF/serialNumber=10C70628F7215FFA2EC3BDFE459686F45CBEE52E
Validity
Not Before: Oct 1 09:28:17 2024 GMT
Not After : Oct 1 09:28:17 2025 GMT
Subject: CN=66fbc0bc-cde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:70:89:25:48:c2:ce:43:b5:22:fb:ae:33:
21:46:77:0a:93:8a:aa:43:4a:e9:79:fc:68:8e:0e:
5b:49:05:90:c2:94:1c:05:bc:7b:8c:1c:01:c9:ba:
ae:95:a8:9e:33:b9:c0:b7:25:a1:a3:20:df:1c:51:
ce:85:7c:ac:69:d4:be:68:9d:b2:31:e8:3c:eb:1e:
56:8e:d1:8d:7f:3b:8d:0a:46:b9:82:6f:dd:6e:54:
65:05:ed:8e:9d:26:0d:6e:2f:e3:6e:6c:ee:37:29:
84:c2:a9:16:bd:02:f5:8b:1c:17:09:dd:92:a3:db:
4a:02:e0:fb:3c:4e:c9:77:79:3e:bc:10:1f:35:59:
64:41:82:a5:47:6e:bf:b9:f9:0d:05:a4:44:a0:3f:
2e:33:83:28:ee:ed:16:88:2f:81:3c:85:a8:fc:cd:
53:e3:9c:35:3a:93:4f:7e:8e:74:1a:97:6b:71:d5:
c3:ed:12:ec:21:d3:63:88:47:a9:4b:fa:e9:e4:75:
f6:a1:eb:ba:77:3a:fd:1c:ae:a7:ba:64:10:3a:ae:
42:a6:2c:2d:fe:15:66:00:c9:30:58:17:96:52:18:
07:a0:2f:7f:09:03:79:d8:34:01:66:c8:58:fd:ff:
7c:b5:31:19:76:54:d8:f6:c0:d1:eb:0c:6b:c5:69:
28:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AD:60:3E:01:FB:F7:27:66:3C:18:27:C8:61:25:56:29:23:B5:A7
X509v3 Authority Key Identifier:
keyid:10:C7:06:28:F7:21:5F:FA:2E:C3:BD:FE:45:96:86:F4:5C:BE:E5:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/EMcGKPchX_ouw73-RZaG9Fy-5S4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EMcGKPchX_ouw73-RZaG9Fy-5S4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/056264AE85DD11E9B4EDE70BF8AEA228/83C04DF87FD711EF9C880ABC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:43f8:1070::/48
Signature Algorithm: sha256WithRSAEncryption
c9:7d:55:7d:ad:f2:86:a3:5f:0f:d7:ec:93:86:b9:33:b7:2f:
ac:9f:dd:45:7c:c2:b0:a1:e0:c9:e5:45:3b:ff:3e:0f:86:fb:
ba:ef:d0:d2:37:61:b0:f8:27:ec:df:bf:70:b7:74:72:5d:2d:
2c:c5:45:c2:68:74:e2:87:4d:b3:ce:2a:7e:8d:bf:4f:ca:81:
f2:bd:48:78:f6:f1:38:28:c0:c3:c4:f6:c5:97:fd:99:65:82:
37:9d:4b:81:19:98:e7:e6:6f:9e:34:e4:65:9e:c3:71:f5:c6:
a4:d0:18:9c:0b:a7:62:47:b3:2e:7e:8a:26:da:c4:4b:0f:d5:
e6:74:1b:c1:97:fb:b6:73:ef:ff:72:a2:d5:cb:ff:50:3c:72:
67:bb:05:b1:29:c4:c3:13:30:3f:7b:80:89:be:a0:34:8e:09:
ef:ff:a5:14:fc:25:71:c4:50:aa:19:4f:72:50:19:7d:cb:cd:
8d:88:e7:d0:77:2a:74:06:59:38:3d:89:ca:a0:9a:88:46:00:
db:85:db:12:7c:10:cc:fd:17:9f:03:76:12:10:fe:f1:56:b9:
ba:7b:5f:bd:1e:c8:ac:49:a8:c8:3a:bc:3a:f4:f3:ee:af:14:
58:ab:d3:47:31:ed:4f:8d:ef:4d:84:11:73:c0:2d:b3:9a:17:
c3:ab:d6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org